Attorney Docket No. P17191-US1 
AMENDMENTS TO THE CLAIMS 

The listing of claims will replace all prior versions, and listings, of claims in the 
application: 

Listing of Claims 

1 . (Currently Amended) A method in an access network for preventing 
hosts (5; A, B) connected to the access network from communicating directly with each 
other, said access network comprising an access router ( I ; 11 ;11'; 11"; 81) and one or 
more switches (3; 12;12' ; 35,36, 37; 83) wherein said hosts being in communication 
contact with said access router via said switches, said method comprising the steps of: 

defining Virtual Local Area Networks, VLANs, in the switches such that traffic 
arriving into the switches from said hosts is forced to the access router; and 

defining in the switches one downlink VLAN being asymmetric and carrying 
downlink traffic from the access router to said hosts, said downlink VLAN being 
common to said hosts connected to the access network; [[,]] 

character i s e d by th e furth e r steps of: 

configuring the VLANs such that said hosts connected to the access network 
belong to the same IP subnet; and 

configuring the access router to be an Address Resolution Protocol proxy and to 
perform intra-subnet routing. 

2. (Previously Presented) A method according to claim 1 , wherein said 
hosts comprise all hosts connected to said access network. 
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3. (Currently Amended) A method according to claim 1 , further 
comprising, or 2, charactoris e d by 

defining in the switches (3; 12; 12' ; 35,36, 37) one uplink VLAN being 
asymmetric and carrying uplink traffic from said, hosts (5; A, B) to the access router 
11 ;11' ; 11") , said uplink VLAN being common to said hosts connected to the access 
network. 

4. (Currently Amended) A method according to claim 1 , further 
comprising, or 2, character i sed by 

defining in the switches (S3) in the [[a]] fixed access network one uplink VLAN for 
each of said hosts or for each of one or more groups of said hosts, said uplink VLANs 
being used for only uplink traffic from said hosts to the access router (84-). 

5. (Currently Amended) A method according to claim 1 , further 
comprising, or 2, charact e ris e d by 

defining in the switches {S3) in a fixed access network one uplink VLAN for each 
of said hosts or for each of one or more groups of said hosts, said uplink VLANs being 
used for uplink traffic from said hosts to the access router {£4} and further defining said 
uplink VLANs to also transfer downlink unicast traffic from the access router to the 
hosts. 

6. (Currently Amended) A method according to claim 1 . further 
comprising, or 2, charact e ris e d by 
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defining in the switches (83) in a WLAN access network one uplink VLAN for 
each Access Point (APW VP-t (85,86) or for each of one or more groups of APs, said 
uplink VLANs being used for uplink traffic from the APs and the hosts connected to the 
APs to the access router {84). 

7. (Currently Amended) A method according to claim 6 further 
comprising, cla i m 3 or 6, charactorisod by 

configuring Access PointSrAP-s, (44) in a WLAN to prevent hosts (A, B) 
connected to the same AP (44) from communicating directly with each other through the 
AP by extending the downlink VLAN and the uplink VLAN to incorporate the AP or by 
utilising the inherent configuration abilities of the AP. 

8. (Currently Amended) A method according to claim 7. further 
comprising, anyone of tho cla i ms 4 7, charact o r i s o d by 

providing in the switches (83) the frames sent from the hosts (A, B) to the access 
router (84) with VLAN tags and 

configuring the access router (84) to be VLAN aware. 

9. (Currently Amended) A method according to claim 1. further 
comprising, any on e of th e pr e c e d i ng c l a i ms, oharaot e r i s e d by 

configuring the VLANs as shared VLANs. 
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1 0. (Currently Amended) A method according to claim 1, further 
comprising, any ono of tho procod i ng c l a i ms, character i sed by 

retrieving by the access router (1 ;11 ; 11' ;lu" ; 81) address mapping information 
for the hosts (5; A, B) during the user authentication procedure. 

1 1 . (Currently Amended) A method according to claim 1, further 
comprising, any ono of tho pr e ced i ng cla i ms, charactor i s e d by 

retrieving^ by the access router^ (I ;11 ; 11'; 11" ;81) address mapping information 
for the hosts (5; A, B) during the IP allocation procedure. 

1 2. (Currently Amended) A method according to claim 1. further 
comprising, any ono of tho proced i ng cla i ms, characterised by 

providing more than one access router in the access network, the VLANs being 
configured such that the access routers belong to the same VLANs. 

13. (Currently Amended) An arrangement in an access network, said 
arrangement comprising: 

an access router (1 ; 11; 11' ; 11" ; 81) , 

one or more switches (3; 12;12' ; 35, 36, 37 ; 83) connected to the access router 

and 

one or more hosts (5; A, B) being in communication contact with said access 
router through said switches, wherein said arrangement is adapted to prevent said 
hosts from communicating directly with each other, said switches being configured to 
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define Virtual Local Area Networks, VLANs, such that traffic arriving into the switches 
from said hosts is forced to proceed to said access router, the switches further being 
configured to define one downlink VLAN being asymmetric and carrying downlink traffic 
from the access router to said hosts, said downlink VLAN being common to said hosts 
connected to the access network , wherein charact e risod i n that the VLANs are 
configured such that said hosts belong to the same IP subnet and in that the access 
router is configured to be an Address Resolution Protocol proxy and to perform intra- 
subnet routing. 

14. (Currently Amended) An arrangement according to claim 13, wherein 
charact e r i sod i n that said hosts comprise all hosts connected to the access network. 

1 5. (Currently Amended) An arrangement according to claim 1 3 , wherein 
or 14, characterised in that the switches (3; 12;12'; 35, 36, 37) are configured to define 
one uplink VLAN being asymmetric and carrying uplink traffic from the hosts (5; A, B) to 
the access router (1;11 ; H'iH") , said uplink VLAN being common to said hosts. 

1 6. (Currently Amended) An arrangement according to claim 1 3 , wherein 
or 14, charactoriGod i n that the switches (S3) in a fixed access network are configured to 
define one uplink VLAN for each of said hosts or for each of one or more groups of said 
hosts, said uplink VLANs being asymmetric and used for uplink traffic from said hosts 
(5; A, B) to the access router {84}. 
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17. (Currently Amended) An arrangement according to claim 13 , wherein 
or 14, charoctor i God in that the switches (83) in a fixed access network are configured to 
define one uplink VLAN for each of said hosts or for each of one or more groups of said 
hosts, said uplink VLANs being used for uplink traffic from said hosts to the access 
router (84-) and for downlink unicast traffic from the access router to the hosts. 

1 8. (Currently Amended) An arrangement according to claim 1 3 . wherein 
or 14, charact o risod i n that the switches (83) in a WLAN access network are configured 
to define one uplink VLAN for each Access Point, AP, (85,86) or for each of one or more 
groups of APs, said uplink VLANs being used for uplink traffic from the APs to the 
access router (84). 

1 9. (Currently Amended) An arrangement according to claim 18. wherein 
any ono of tho c l a i ms 16 18, charactorisod in that the access router (84) is configured to 
be VLAN aware and in that the switches (83) are adapted to provide the frames sent 
from the hosts (A, B) to the access router (84) with VLAN tags. 

20. (Currently Amended) An arrangement according to claim 13, wherein 
any on e of th e c l aims 13 - 19, charact e r i s e d i n that the switches (3; 12;12' ; 35,36, 37; 
83) are adapted to configure the VLANs as shared VLANs. 

21 . (Currently Amended) An arrangement according to claim 13, wherein 
any on e of th e c l a i ms 13 - 20, charact e r i s e d i n that the access router ( I ; 11 ;11'; 11"; 81) 
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is adapted to retrieve address mapping information for the hosts (5; A, B) during the 
user authentication procedure. 

22. (Currently Amended) An arrangement according to claim 13, wherein 
any one of tho c l a i ms 13 21, charactor i sed in that the access router (1 ; 11 ;11'; 11"; 81) 
is adapted to retrieve address mapping information for the hosts (5; A, B) during the IP 
allocation procedure. 

23. (Currently Amended) An arrangement according to claim 13, wherein 
any on o of tho cla i ms 13 22, character i sed in that more than one access router is [[are]] 
provided in the system, the VLANs being configured in the switches such that the 
access routers belong to the same VLANs. 

24. - 25. (Canceled without Prejudice) 
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